chore(deps-dev): bump the gha group across 1 directory with 5 updates #2925

dependabot · 2025-05-09T19:22:44Z

Bumps the gha group with 5 updates in the /packages/opentelemetry-instrumentation-haystack directory:

Package	From	To
flake8	`7.0.0`	`7.2.0`
pytest	`8.2.2`	`8.3.5`
haystack-ai	`2.3.1`	`2.13.2`
vcrpy	`6.0.1`	`7.0.0`
pytest-recording	`0.13.2`	`0.13.4`

Updates flake8 from 7.0.0 to 7.2.0

Commits

16f5f28 Release 7.2.0
ebad305 Merge pull request #1974 from PyCQA/update-plugins
d56d569 update versions of pycodestyle / pyflakes
a7e8f62 Merge pull request #1973 from PyCQA/py39-plus
9d55ccd py39+
e492aeb Merge pull request #1967 from PyCQA/unnecessary-mocks
fa2ed71 remove a few unnecessary mocks in test_checker_manager
fffee8b Release 7.1.2
19001f7 Merge pull request #1966 from PyCQA/limit-procs-to-file-count
f35737a avoid starting unnecessary processes when file count is limited
Additional commits viewable in compare view

Updates pytest from 8.2.2 to 8.3.5

Release notes

Sourced from pytest's releases.

8.3.5

pytest 8.3.5 (2025-03-02)

Bug fixes

#11777: Fixed issue where sequences were still being shortened even with -vv verbosity.

#12888: Fixed broken input when using Python 3.13+ and a libedit build of Python, such as on macOS or with uv-managed Python binaries from the python-build-standalone project. This could manifest e.g. by a broken prompt when using Pdb, or seeing empty inputs with manual usage of input() and suspended capturing.

#13026: Fixed AttributeError{.interpreted-text role="class"} crash when using --import-mode=importlib when top-level directory same name as another module of the standard library.

#13053: Fixed a regression in pytest 8.3.4 where, when using --import-mode=importlib, a directory containing py file with the same name would cause an ImportError

#13083: Fixed issue where pytest could crash if one of the collected directories got removed during collection.

Improved documentation

#12842: Added dedicated page about using types with pytest.

See types{.interpreted-text role="ref"} for detailed usage.

Contributor-facing changes

#13112: Fixed selftest failures in test_terminal.py with Pygments >= 2.19.0

#13256: Support for Towncrier versions released in 2024 has been re-enabled when building Sphinx docs -- by webknjaz{.interpreted-text role="user"}.

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

#12592: Fixed KeyError{.interpreted-text role="class"} crash when using --import-mode=importlib in a directory layout where a directory contains a child directory with the same name.

#12818: Assertion rewriting now preserves the source ranges of the original instructions, making it play well with tools that deal with the AST, like executing.

#12849: ANSI escape codes for colored output now handled correctly in pytest.fail{.interpreted-text role="func"} with [pytrace=False]{.title-ref}.

#9353: pytest.approx{.interpreted-text role="func"} now uses strict equality when given booleans.

Improved documentation

#10558: Fix ambiguous docstring of pytest.Config.getoption{.interpreted-text role="func"}.

#10829: Improve documentation on the current handling of the --basetemp option and its lack of retention functionality (temporary directory location and retention{.interpreted-text role="ref"}).

... (truncated)

Commits

b55ab2a Prepare release version 8.3.5
e217726 Added dedicated page about using types with pytest #12842 (#12963) (#13260)
2fa3f83 Add more resources and studies to flaky tests page in docs (#13250) (#13259)
e5c2efe Merge pull request #13256 from webknjaz/maintenance/towncrier-bump (#13258)
3419674 Merge pull request #13187 from pytest-dev/patchback/backports/8.3.x/b4009b319...
b75cfb1 Add readline workaround for libedit (#13176)
edbfff7 doc: Clarify capturing .readouterr() return value (#13222) (#13225)
2ebba00 Merge pull request #13199 from jakkdl/tox_docs_no_fetch (#13200)
eb6496b doc: Change training to remote only (#13196) (#13197)
78cf1f6 ci: Bump build-and-inspect-python-package (#13188)
Additional commits viewable in compare view

Updates haystack-ai from 2.3.1 to 2.13.2

Release notes

Sourced from haystack-ai's releases.

v2.13.2

⚡️ Enhancement Notes

Updated pipeline execution logic to use a new utility method _deepcopy_with_exceptions, which attempts to deep copy an object and safely falls back to the original object if copying fails. Additionally _deepcopy_with_exceptions skips deep-copying of Component, Tool, and Toolset instances when used as runtime parameters. This prevents errors and unintended behavior caused by trying to deepcopy objects that contain non-copyable attributes (e.g. Jinja2 templates, clients). Previously, standard deepcopy was used on inputs and outputs which occasionally lead to errors since certain Python objects cannot be deepcopied.

🐛 Bug Fixes

Make internal tool conversion in the HuggingFaceAPICompatibleChatGenerator compatible with huggingface_hub>=0.31.0. In the huggingface_hub library, arguments attribute of ChatCompletionInputFunctionDefinition has been renamed to parameters. Our implementation is compatible with both the legacy version and the new one.

The HuggingFaceAPIChatGenerator now checks the type of the arguments variable in the tool calls returned by the Hugging Face API. If arguments is a JSON string, it is parsed into a dictionary. Previously, the arguments type was not checked, which sometimes led to failures later in the tool workflow.

v2.13.1

Release Notes

v2.13.1

Bug Fixes

Update the __deepcopy__ of ComponentTool to gracefully handle NotImplementedError when trying to deepcopy attributes.

Fix an issue where OpenAIChatGenerator and OpenAIGenerator were not properly handling wrapped streaming responses from tools like Weave.

Move deserialize_tools_inplace back to original import path of from haystack.tools.tool import deserialize_tools_inplace.

v2.13.0

⭐️ Highlights

Enhanced Agent Tracing and Async Support

Haystack's Agent got several improvements!

Agent Tracing Agent tracing now provides deeper visibility into the agent's execution. For every call, the inputs and outputs of the ChatGenerator and ToolInvoker are captured and logged using dedicated child spans. This makes it easier to debug, monitor, and analyze how an agent operates step-by-step.

Below is an example of what the trace looks like in Langfuse:
# pip install langfuse-haystack
from haystack_integrations.components.connectors.langfuse.langfuse_connector import LangfuseConnector
from haystack.components.agents import Agent 
from haystack.components.generators.chat import OpenAIChatGenerator
tracer = LangfuseConnector("My Haystack Agent")
agent = Agent(
system_prompt="You help provide the weather for cities"
chat_generator=OpenAIChatGenerator(),
tools=[weather_tool],
)
Async Support

... (truncated)

Commits

2280f71 fix: Remove old reno and update reno (#9357)
ade29fc fix: HuggingFaceAPIChatGenerator - make tool conversion compatible with `hu...
cff3435 fix: make HuggingFaceAPIChatGenerator convert Tool Call arguments from st...
e29e882 perf: Don't deepcopy Components, Tools, or Toolsets (#9356)
1d8ad05 fix: Update deepcopying in Pipeline to have a fallback in case of error (#9346)
17c6b55 bump version to 2.13.2
88ce981 Fix OpenAIGenerator and OpenAIChatGenerator to allow wrapped streaming object...
8d109a9 fix: Update to ComponentTool __deepcopy__ (#9302)
1401c51 fix: Move deserialize_tools_inplace to original import path (#9301)
7b42b60 Update VERSION.txt
Additional commits viewable in compare view

Updates vcrpy from 6.0.1 to 7.0.0

Release notes

Sourced from vcrpy's releases.

v7.0.0

What's Changed
- Drop support for python 3.8 (major version bump) - thanks @jairhenrique
- Various linting and test fixes - thanks @jairhenrique
- Bugfix for urllib2>=2.3.0 - missing version_string ([#888](https://github.com/kevin1024/vcrpy/issues/888))
- Bugfix for asyncio.run - thanks @alekeik1
New Contributors

@exslim made their first contribution in kevin1024/vcrpy#889

@alekseik1 made their first contribution in kevin1024/vcrpy#886

v6.0.2

Ensure body is consumed only once (#846) - thanks @sathieu

Permit urllib3 2.x for non-PyPy Python >=3.10

Fix typos in test commands - thanks @chuckwondo

Several test and workflow improvements - thanks @hartwork and @graingert

Changelog

Sourced from vcrpy's changelog.

Changelog

For a full list of triaged issues, bugs and PRs and what release they are targeted for please see the following link.

ROADMAP MILESTONES <https://github.com/kevin1024/vcrpy/milestones>_

All help in providing PRs to close out bug issues is appreciated. Even if that is providing a repo that fully replicates issues. We have very generous contributors that have added these to bug issues which meant another contributor picked up the bug and closed it out.

7.0.0

Drop support for python 3.8 (major version bump) - thanks @jairhenrique

Various linting and test fixes - thanks @jairhenrique

Bugfix for urllib2>=2.3.0 - missing version_string (#888)

Bugfix for asyncio.run - thanks @alekeik1

6.0.2

Ensure body is consumed only once (#846) - thanks @sathieu

Permit urllib3 2.x for non-PyPy Python >=3.10

Fix typos in test commands - thanks @chuckwondo

Several test and workflow improvements - thanks @hartwork and @graingert

6.0.1

Bugfix with to Tornado cassette generator (thanks @graingert)

6.0.0

BREAKING: Fix issue with httpx support (thanks @parkerhancock) in #784. NOTE: You may have to recreate some of your cassettes produced in previous releases due to the binary format being saved incorrectly in previous releases

BREAKING: Drop support for boto (vcrpy still supports boto3, but is dropping the deprecated boto support in this release. (thanks @jairhenrique)

Fix compatibility issue with Python 3.12 (thanks @hartwork)

Drop simplejson (fixes some compatibility issues) (thanks @jairhenrique)

Run CI on Python 3.12 and PyPy 3.9-3.10 (thanks @mgorny)

Various linting and docs improvements (thanks @jairhenrique)

Tornado fixes (thanks @graingert)

5.1.0

Use ruff for linting (instead of current flake8/isort/pyflakes) - thanks @jairhenrique

Enable rule B (flake8-bugbear) on ruff - thanks @jairhenrique

Configure read the docs V2 - thanks @jairhenrique

Fix typo in docs - thanks @quasimik

Make json.loads of Python >=3.6 decode bytes by itself - thanks @hartwork

Fix body matcher for chunked requests (fixes #734) - thanks @hartwork

Fix query param filter for aiohttp (fixes #517) - thanks @hartwork and @salomvary

Remove unnecessary dependency on six. - thanks @charettes

build(deps): update sphinx requirement from <7 to <8 - thanks @jairhenrique

Add action to validate docs - thanks @jairhenrique

Add editorconfig file - thanks @jairhenrique

Drop iscoroutinefunction fallback function for unsupported python thanks @jairhenrique

5.0.0

BREAKING CHANGE: Drop support for Python 3.7. 3.7 is EOL as of 6/27/23 Thanks @jairhenrique

BREAKING CHANGE: Custom Cassette persisters no longer catch ValueError. If you have implemented a custom persister (has anyone implemented a custom persister? Let us know!) then you will need to throw a CassetteNotFoundError when unable to find a cassette. See #681 for discussion and reason for this change. Thanks @amosjyng for the PR and the review from @hartwork

4.4.0

HUGE thanks to @hartwork for all the work done on this release!

Bring vcr/unittest in to vcrpy as a full feature of vcr instead of a separate library. Big thanks to @hartwork for doing this and to @agriffis for originally creating the library

Make decompression robust towards already decompressed input (thanks @hartwork)

... (truncated)

Commits

3278619 Release v7.0.0
3fb62e0 fix: correctly handle asyncio.run when loop exists
8197865 build(deps): update sphinx requirement from <8 to <9
be651bd pre-commit: Autoupdate
a6698ed Fix aiohttp tests
48d0a2e Fixed missing version_string attribute when used with urllib3>=2.3.0
5b858b1 Fix lint
c8d99a9 Fix ruff configuration
ce27c63 Merge pull request #736 from kevin1024/drop-python38
ab8944d Drop python 3.8 support
Additional commits viewable in compare view

Updates pytest-recording from 0.13.2 to 0.13.4

Release notes

Sourced from pytest-recording's releases.

Release 0.13.4

Fixed

AttributeError on Windows. #174

Release 0.13.3

Fixed

Limit generated cassette names to prevent OSError. #172

Changelog

Sourced from pytest-recording's changelog.

0.13.4_ - 2025-04-24

AttributeError on Windows. [#174](https://github.com/kiwicom/pytest-recording/issues/174)_

0.13.3_ - 2025-04-24

Limit generated cassette names to prevent OSError. [#172](https://github.com/kiwicom/pytest-recording/issues/172)_

Commits

c2d2db7 chore: Release 0.13.4
cf919c9 test: Run tests on Windows
b8b45b7 fix: Use fallback for max filename length on Windows
8a7e19f docs: Update README.rst
3ad7910 chore: Release 0.13.3
9a6e12c docs: Add a note for package maintainers
a70532b chore: Revert "test: Disable pretty plugin in pytest"
6b84832 chore(deps): update codecov/codecov-action action to v5.4.2
460a7f9 test: Add long_cassette_name test
9822a50 fix: Check default_cassette to prevent it from being too long.
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the gha group with 5 updates in the /packages/opentelemetry-instrumentation-haystack directory: | Package | From | To | | --- | --- | --- | | [flake8](https://github.com/pycqa/flake8) | `7.0.0` | `7.2.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.2` | `8.3.5` | | [haystack-ai](https://github.com/deepset-ai/haystack) | `2.3.1` | `2.13.2` | | [vcrpy](https://github.com/kevin1024/vcrpy) | `6.0.1` | `7.0.0` | | [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.2` | `0.13.4` | Updates `flake8` from 7.0.0 to 7.2.0 - [Commits](PyCQA/flake8@7.0.0...7.2.0) Updates `pytest` from 8.2.2 to 8.3.5 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.2...8.3.5) Updates `haystack-ai` from 2.3.1 to 2.13.2 - [Release notes](https://github.com/deepset-ai/haystack/releases) - [Commits](deepset-ai/haystack@v2.3.1...v2.13.2) Updates `vcrpy` from 6.0.1 to 7.0.0 - [Release notes](https://github.com/kevin1024/vcrpy/releases) - [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst) - [Commits](kevin1024/vcrpy@v6.0.1...v7.0.0) Updates `pytest-recording` from 0.13.2 to 0.13.4 - [Release notes](https://github.com/kiwicom/pytest-recording/releases) - [Changelog](https://github.com/kiwicom/pytest-recording/blob/master/docs/changelog.rst) - [Commits](kiwicom/pytest-recording@v0.13.2...v0.13.4) --- updated-dependencies: - dependency-name: flake8 dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: pytest dependency-version: 8.3.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: haystack-ai dependency-version: 2.13.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: vcrpy dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha - dependency-name: pytest-recording dependency-version: 0.13.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gha ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies label May 9, 2025

dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-haystack/gha-3204b46648 branch 4 times, most recently from de18841 to 0e15b10 Compare May 16, 2025 14:41

dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-haystack/gha-3204b46648 branch 2 times, most recently from 22e27c2 to 9041082 Compare May 20, 2025 15:06

dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-haystack/gha-3204b46648 branch from 9041082 to 771855d Compare June 2, 2025 02:10

dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-haystack/gha-3204b46648 branch from 771855d to b8d39be Compare June 9, 2025 02:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the gha group across 1 directory with 5 updates #2925

chore(deps-dev): bump the gha group across 1 directory with 5 updates #2925

Uh oh!

dependabot bot commented on behalf of github May 9, 2025 •

edited

Loading

Uh oh!

Uh oh!

chore(deps-dev): bump the gha group across 1 directory with 5 updates #2925

Are you sure you want to change the base?

chore(deps-dev): bump the gha group across 1 directory with 5 updates #2925

Uh oh!

Conversation

dependabot bot commented on behalf of github May 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.3.5

pytest 8.3.5 (2025-03-02)

Bug fixes

Improved documentation

Contributor-facing changes

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

Improved documentation

v2.13.2

⚡️ Enhancement Notes

🐛 Bug Fixes

v2.13.1

Release Notes

v2.13.1

Bug Fixes

v2.13.0

⭐️ Highlights

Enhanced Agent Tracing and Async Support

v7.0.0

What's Changed

New Contributors

v6.0.2

Changelog

Release 0.13.4

Fixed

Release 0.13.3

Fixed

0.13.4_ - 2025-04-24

0.13.3_ - 2025-04-24

Uh oh!

Uh oh!

dependabot bot commented on behalf of github May 9, 2025 •

edited

Loading

`0.13.4`_ - 2025-04-24

`0.13.3`_ - 2025-04-24